CVE-2024-28188

Summary

CVE-2024-28188 is a vulnerability affecting Jupyter Scheduler, a collection of extensions for managing jobs in Jupyter Notebook. This issue allows an attacker to potentially view the list of conda environments of Jupyter Scheduler users. Exposure of this information could reveal details about the projects specific users are working on. The vulnerability has been mitigated in versions 1.1.6, 1.2.1, 1.8.2, and 2.5.2. Users are encouraged to update their Jupyter Scheduler installations to the latest patched version to protect against this information disclosure vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.